EP2367135A2 - Adapter for portable storage medium and method of disabling data access - Google Patents
Adapter for portable storage medium and method of disabling data access Download PDFInfo
- Publication number
- EP2367135A2 EP2367135A2 EP11158730A EP11158730A EP2367135A2 EP 2367135 A2 EP2367135 A2 EP 2367135A2 EP 11158730 A EP11158730 A EP 11158730A EP 11158730 A EP11158730 A EP 11158730A EP 2367135 A2 EP2367135 A2 EP 2367135A2
- Authority
- EP
- European Patent Office
- Prior art keywords
- storage medium
- portable storage
- access
- disabling
- encryption key
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
- G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
- G06F21/78—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure storage of data
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/2107—File encryption
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/2143—Clearing memory, e.g. to prevent the data from being stolen
Definitions
- the embodiments discussed herein are related to an adapter for a portable storage medium (hereinafter referred to as a portable storage medium adapter) and a method of disabling data access.
- portable storage media such as universal serial bus (hereinafter denoted as USB) memories excel in portability, etc., they have the risk of information leak caused by the portable storage media that are lost or stolen.
- the portable storage media are provided with, for example, a function of adding a lock function to an area where the data in the USB memories is stored and not canceling the lock function if authentication using passwords fails, a function of deleting data files upon occurrences of input errors of passwords, or a function of encrypting the entire area where the data in the USB memories is stored without the lock function and preventing the decryption if authentication using passwords fails.
- a portable storage medium adapter connected to a computer to store data received from the computer in a portable storage medium includes, a holding part that detachably holds the portable storage medium, a detecting part that detects an unloading operation of the portable storage medium by a user, and a disablement executing part that executes a disabling process to disable external access to the data stored in the portable storage medium at a time when the unloading operation is detected in the detecting part.
- Fig. 1 is a perspective view illustrating an information processing apparatus and a USB adapter according to a first embodiment of the present invention
- FIG. 1 A portable storage medium adapter and a method of disabling data access according to a first embodiment will now be described with reference to Figs. 1 to 9 .
- the same reference numerals are used to identify the same components in the respective drawings.
- Fig. 1 is a perspective view illustrating an information processing apparatus 40 serving as a host apparatus, such as a personal computer, and a USB adapter 100 serving as a portable storage medium adapter for connecting a portable storage medium to an information processing apparatus.
- the USB adapter 100 is connected to a USB port 49 of the information processing apparatus 40.
- the information processing apparatus 40 is connected to a server 320 via, for example, a local area network (LAN).
- LAN local area network
- the information processing apparatus 40 may not be connected to the server 320.
- the information processing apparatus 40 includes a processor 42, a storage unit 44 (for example, a hard disk), an input unit 46 such as a keyboard, a display unit 48 such as a liquid crystal display, and the USB port (connection terminal) 49.
- Fig. 2 is a block diagram schematically illustrating an exemplary configuration of the USB adapter 100.
- the USB adapter 100 includes a USB interface (I/F) 110, a USB hub 112, a read only memory (ROM) 118, a microcomputer ( ⁇ C) 120, a hub switch 130, a card slot 134, and an indicator 144, such as a light emitting diode (LED).
- a Secure Digital (SD) card 205 functioning as a portable storage medium can be loaded and unloaded from the card slot 134.
- the card slot 134 functions as a holding part holding the SD card and a release part releasing the holding of the SD card.
- the USB adapter 100 further includes a main power-supply circuit 150, a battery and charging circuit 160, an auxiliary power-supply circuit 162, a real-time clock (RTC) 164 for display or monitoring of time, and a switch 166.
- RTC real-time clock
- the card slot 134 discharges the loaded SD card 205 (releases the holding state).
- the loading-unloading switch 201 is provided in part of a main body 100b of the USB adapter 100, as illustrated in Fig. 1 .
- the USB interface 110 includes a power supply line or a pin PL (a broken line with arrows) and a data line or a pin DL (a solid line with two-way arrows).
- the USB hub 112 is connected to the USB interface 110 and includes a branch power supply line PL (a broken line with arrows) and a branch data line DL (a solid line with two-way arrows).
- the indicator 144 is controlled by the microcomputer 120 (a central processing unit (CPU) 122) to display, for example, the operation state of the USB adapter 100 and the remaining time before the microcomputer 120 performs the first or subsequent access disabling or protecting process.
- the microcomputer 120 a central processing unit (CPU) 122 to display, for example, the operation state of the USB adapter 100 and the remaining time before the microcomputer 120 performs the first or subsequent access disabling or protecting process.
- the microcomputer 120 includes the CPU 122, a random access memory (RAM) 126, an internal flash memory 124, and a power-supply control circuit 128.
- the internal flash memory 124 is capable of storing a firmware program (FW) used by the CPU 122 and data (identification information for authentication, an encryption key for the data file or the like, an access disabling policy, a log, and state information).
- FW firmware program
- the USB adapter 100 is connected to the USB port 49 of the information processing apparatus 40 via the USB interface 110 (DL).
- the ROM 118 and the microcomputer 120 are connected to the USB interface 110 via the USB hub (DL) 112.
- the microcomputer 120 is connected to the card slot 134 and the SD card 205 loaded in the card slot 134 via the hub switch (DL) 130 and is connected to the battery and charging circuit 160, the real-time clock 164, and the indicator 144.
- the card slot 134 and the SD card 205 are connected to the USB interface 110 or the microcomputer 120 via the hub switch 130 and the USB hub (DL) 112.
- the battery and charging circuit 160 receives power from the USB port 49 of the information processing apparatus 40 via the USB hub 112 and the USB interface 110 (PL) to charge a rechargeable battery, to supply the power to the auxiliary power-supply circuit 162, and to supply the power to the main power-supply circuit 150 via the switch 166.
- the battery and charging circuit 160 are connected to the auxiliary power-supply circuit 162.
- the main power-supply circuit 150 also receives power from the USB port 49 of the information processing apparatus 40 via the USB hub 112 and the USB interface 110 (PL).
- the main power-supply circuit 150 is subjected to on-off control with the switch 166 to receive the power from the battery and charging circuit 160 when the USB adapter 100 is not connected to the information processing apparatus 40.
- the switch 166 is controlled by the microcomputer 120 and the real-time clock 164.
- the main power-supply circuit 150 supplies power to the ROM 118, the microcomputer 120, the card slot 134, and the indicator 144 when the USB interface 110 is connected to the USB port 49 of the information processing apparatus 40 or when the main power-supply circuit 150 is turned on with the switch 166 to receive the power from the battery and charging circuit 160.
- the auxiliary power-supply circuit 162 supplies power to the real-time clock 164 and the switch 166.
- the indicator 144 may receive the power from the auxiliary power-supply circuit 162, instead of the main power-supply circuit 150.
- the processor 42 of the information processing apparatus 40 can operate in accordance with a program (PRG_M) stored in the storage unit 44 or the program (PRG_U) stored in the USB adapter 100 (the ROM 118).
- the utility program (PRG_M) for a manager and/or the utility program (PRG_U) for the user are stored in the storage unit 44.
- the utility program (PRG_U) for the user is read out from the ROM 118 in the USB adapter 100 to be stored in the storage unit 44 upon connection of the USB adapter 100 to the information processing apparatus 40.
- the utility program for the user includes, for example, management programs for authentication of the user, for authentication of the information processing apparatus, and for building a file system of the USB adapter 100 (the SD card 205).
- the utility program (PRG_M) for the manager includes, for example, management programs for authentication of the manager, for authentication of the information processing apparatus, for setting (adding, updating, or deleting) the information processing apparatus to which access is permitted, for setting (adding, updating, or deleting) the access disabling policy, and for building the file system of the USB adapter 100 (the SD card 205).
- the access disabling policy may include identification information and/or parameters of rules or conditions and disabling methods.
- the input unit 46 includes, for example, a keyboard and/or a pointing device.
- Fig. 3 is a block diagram schematically illustrating another exemplary configuration or arrangement of the USB adapter 100 according to the first embodiment.
- the function of a hub switch 132 provided in the microcomputer 120 is used, instead of the hub switch 130 in Fig. 2 .
- the remaining configuration or arrangement of the USB adapter 100 illustrated in Fig. 3 and the operation thereof are similar to the ones in Fig. 2 .
- Fig. 4 is a block diagram illustrating an exemplary configuration or arrangement of the main functional parts in each of the microcomputers 120 in Fig. 2 and Fig. 3 .
- the microcomputer 120 includes a policy evaluator or determiner 20, an authentication processor 22, a command processor 24, an access disabling policy storage part (setting information storage part) 26, a time manager 28, and a state output part 30 as functional parts or circuit parts.
- the microcomputer 120 also includes a selector or controller 32 for selecting or controlling an access disabling method, an access disablement processor (executer) or a data protection processor 34, and a state information and log (record) storage part (state information holder) 36 as other functional parts or circuit parts.
- the access disablement processor 34 functions as a disablement executer. These functions are realized (installed) by the firmware FW or the program (PRG_F) in the flash memory 124.
- the authentication processor 22 includes an authentication information storage part.
- the authentication information storage part in the authentication processor 22, the access disabling policy storage part 26, and the state information and log storage part 36 are areas in the flash memory 124 in the microcomputer 120.
- the firmware FW, the program PRG_F, and the data in the flash memory 124 are not erased even if the power in the battery and charging circuit 160 runs out.
- Erasing of encryption key in protection process 1 in the access disablement processor 34 is a process of erasing multiple encryption keys stored in the flash memory 124.
- the multiple encryption keys are created upon storage of the data file that is encrypted in the SD card 205 to be stored in the flash memory 124.
- the policy evaluator 20 determines whether the SD card 205 loaded in the USB adapter 100 is to be protected, that is, whether access to the data file in the SD card 205 is to be disabled in each protection level in accordance with each access disabling policy (the rule or condition and the disabling method of the access disabling policy) stored in the access disabling policy storage part (the part where the rules or conditions and the disabling methods are stored) 26 on the basis of the current date and time and the log and state information. If the policy evaluator 20 determines that the SD card 205 is to be protected, the policy evaluator 20 controls the selector 32 so as to select an access disabling method or a protection method in order to disable access to the data in the SD card 205. For example, erasing of an encryption key, erasing of data, or restriction of the function is performed to disable access to the data in the SD card 205.
- the authentication processor 22 sets the identification information for authentication to authenticate the information processing apparatus, the manager, and the user to which access is permitted on the basis of identification information for authentication set by the manager. As a result, connection of the USB adapter 100 to the authorized information processing apparatus and use of the USB adapter 100 by the authorized user or manager are detected.
- the authentication processor 22 records, for example, the current date and time, the date and time when an event such as authentication occurs, the date and time when the USB adapter 100 is connected to the server 320 via the information processing apparatus, the date and time when the USB adapter 100 is opened and/or closed (when a cap of the USB adapter 100 is opened and/or closed or when a strap of the USB adapter 100 is mounted and/or unmounted), the count of continuous failures of authentication of the user, the count of continuous failures of authentication of the manager (privileged user), the count of continuous failures of authentication of the information processing apparatus 40, the remaining amount of power in the battery, and the state information in the state information and log storage part 36 as the log or state information.
- the command processor 24 executes a command received from the information processing apparatus 40.
- the command processor 24 stores the access disabling policy (the identification information and/or parameter indicating the rule or condition and the disabling method of the access disabling policy) set by the manager in the access disabling policy storage part 26 in accordance with the command.
- the command processor 24 controls the hub switch 130 or 132 in accordance with the command.
- the command processor 24 causes the state output part 30 to output the state information or log to the information processing apparatus 40 via the USB interface 110 and the USB hub 112 in accordance with the command.
- the time manager 28 manages, sets, and controls the real-time clock 164 in accordance with a request from the policy evaluator 20 or the result of evaluation by the policy evaluator 20.
- the loading-unloading switch 201 notifies the policy evaluator 20 of being pressed by the user. After an access disabling process is performed by the access disablement processor 34 in response to an instruction from the policy evaluator 20, the loading-unloading switch 201 is used to discharge the SD card 205 from the card slot 134 (release the holding state) so that the user can pick up the SD card 205 in response to an instruction from the policy evaluator 20.
- FIG. 5 is a flowchart illustrating an exemplary process in the USB adapter 100 when the loading-unloading switch 201 is pressed.
- S10 it is determined whether the loading-unloading switch 201 is pressed by the user. If the loading-unloading switch 201 is pressed by the user, the pressing of the loading-unloading switch 201 is notified to the policy evaluator 20. In S12, a state evaluation subroutine is executed.
- the policy evaluator 20 executes the state evaluation routine in S12. Specifically, the policy evaluator 20 confirms the access disabling policy registered in the access disabling policy storage part 26 to execute a subroutine to confirm whether any access disabling process executed when the SD card 205 is unloaded exists. An exemplary process in Fig. 6 is performed in the subroutine in S12.
- the policy evaluator 20 reads out one access disabling policy from the access disabling policy storage part 26.
- Each access disabling policy has a format illustrated in Fig. 8A .
- the format in Fig. 8A is only an example.
- the values of factors causing the access disablement are defined, for example, in a manner illustrated in Fig. 8B and the values of access disabling methods are defined, for example, in a manner illustrated in Fig. 8C .
- the format in Fig. 8A includes, for example, a factor causing the disablement of access to data (two bytes), an access disabling method (one byte), and a threshold value (four bytes).
- the threshold value concerns the factor causing the access disablement.
- the 8B include, for example, the elapsed time since the final authorized access, the remaining amount of power in the battery, the count of failures of authentication of the information processing apparatus, the count of failures of authentication of the user, the count of failures of authentication of the manager (privileged user), the time since connection of the USB adapter 100 to the information processing apparatus 40 is started before the authentication of the information processing apparatus 40 is completed (succeeds), the access disabling command specified by the user, and the unloading of the SD card 205.
- Fig. 9 illustrates examples of the access disabling policies based on Figs. 8A to 8C . Accordingly, the policy evaluator 20 sequentially reads out the access disabling policies in Fig. 9 from the top to the bottom in S20.
- the policy evaluator 20 determines whether one access disabling policy is read out. If the determination in S22 is affirmative, in S24, it is determined whether the factor and the threshold value in the readout access disabling policy coincide with (are matched with) the ones when the loading-unloading switch 201 is pressed. If the factor and the threshold value in the readout access disabling policy do not coincide with the ones when the loading-unloading switch 201 is pressed, the determination in S26 is negative and the process goes back to S20. If the factor and the threshold value in the readout access disabling policy coincide with the ones when the loading-unloading switch 201 is pressed, the determination in S26 is affirmative and the process goes to S28.
- the determination in S26 is affirmative when the factor causing the access disablement in the access disabling policy is the "unloading of the SD card 205."
- the determination in S26 can be affirmative by the factor causing the access disablement in another rule before the rule in which the factor causing the access disablement is the "unloading of the SD card 205" is determined.
- the policy evaluator 20 executes a subroutine to read out the access disabling process. Specifically, the policy evaluator 20 executes an exemplary process in Fig. 7 .
- the policy evaluator 20 determines whether the access disabling method in the readout access disabling policy is erasing of encryption key. If the determination is affirmative, in S32, the policy evaluator 20 sets an erasing-of-encryption-key flag. The policy evaluator 20 has a two-byte variable as each flag. Accordingly, the policy evaluator 20 sets the bit corresponding to the erasing of encryption key in the two-byte variable in S32.
- the policy evaluator 20 determines whether the access disabling method is erasing by overwriting. If the determination is affirmative, in S36, the policy evaluator 20 sets an erasing-by-overwriting flag. In S38, the policy evaluator 20 determines whether the access disabling method is partial erasing. If the determination is affirmative, in S40, the policy evaluator 20 sets a partial erasing flag. In S42, the policy evaluator 20 determines whether the access disabling method is lock. If the determination is affirmative, in S44, the policy evaluator 20 sets a lock flag. In S46, the policy evaluator 20 determines whether the access disabling method is functional restriction. If the determination is affirmative, in S48, the policy evaluator 20 sets a functional restriction flag.
- the policy evaluator 20 sets a variable n indicating a spare number to one.
- the policy evaluator 20 determines whether the access disabling method is Spare n (Spare 1). If the determination is affirmative, in S54, the policy evaluator 20 seta a Spare n flag (Spare 1 flag).
- the policy evaluator 20 determines whether the variable n is equal to a maximum value N. If the determination is negative, in S58, the policy evaluator 20 increments the variable n by one and the process goes back to S52. The process repeats the steps S52 to S58 until the variable n is equal to the maximum value N.
- the policy evaluator 20 determines whether the protection is to be performed, that is, whether a flag is set in any bit in the two-byte variable in the process in Fig. 7 . If the determination is negative, the process in Fig. 5 is terminated. If the determination is affirmative, the process goes to S16.
- the policy evaluator 20 sequentially selects the bits, for example, in descending order from the bits for which the flags are set in the two-byte variable via the access disablement processor 34 and sequentially executes the disabling processes corresponding to the bits.
- the disabling processes make access to the files (data) in the SD card 205 difficult or disable access to the files (data) in the SD card 205.
- the disabling process having no meaning when it is executed possibly exists depending on the order. In such a case, the access disabling process is skipped.
- the policy evaluator 20 After the disabling processes are executed in S16, in S18, the policy evaluator 20 notifies the loading-unloading switch 201 of a permission to unload the SD card 205. An unloading operation (discharge operation) of the SD card 205 from the card slot 134 is performed with the loading-unloading switch 201. Then, all the processes in Figs. 5 to 7 are terminated. Upon termination of the processes, the readout of the data stored in the SD card 205 is made difficult or is disabled.
- the access disablement processor 34 executes the disabling process to disable external access to the data stored in the SD card 205 at a time when the loading-unloading switch 201 receives the unloading operation of the SD card 205 by the user.
- the access to the data stored in the SD card 205 is disabled in the unloading of the SD card 205, it is possible to suppress leakage of the information in the SD card 205.
- the SD card 205 can be replaced with another, if needed, it is possible to improve the user-friendliness of the user, compared with USB memories in related art.
- the access disablement processor 34 Since the SD card 205 is not discharged from the card slot 134 before the access disablement processor 34 terminates the execution of the access disabling process in the first embodiment, it is possible to more reliably suppress the leakage of the information.
- the access disablement processor 34 executes the access disabling process, such as the erasing of the data in the SD card 205, in the first embodiment, the present invention is not limited to this.
- the access disablement processor 34 may only issue a command to cause the SD card 205 to erase the data.
- the USB adapter 100 includes an encryption module 211 serving as an encryption key creator and a disablement executer and a loading-unloading detection module 213, instead of the loading-unloading switch 201 in the first embodiment (refer to Fig. 4 ). It is assumed here that the card slot 134 is capable of manual loading and unloading of the SD card 205.
- the card slot 134 is not limited to the manual loading and unloading and the card slot 134 may be capable of the automatic loading and unloading of the SD card 205 (the loading and unloading by using the loading-unloading switch), as in the first embodiment.
- the encryption module 211 encrypts data to be written on the SD card 205 connected to the card slot 134 with an encryption key stored in the encryption module 211. In readout of the data, the data is decrypted with the encryption key stored in the encryption module 211.
- the encryption module 211 also creates and erases ciphers.
- the loading-unloading detection module 213 detects a state in which the SD card 205 is loaded (mounted) in the card slot 134 and a state in which the SD card 205 is unloaded (unmounted).
- the loading-unloading detection module 213 uses, for example, an optical sensor or a contact sensor to detect the loading or unloading of the SD card 205.
- the loading-unloading detection module 213 requests the encryption module 211 to create an encryption key when the SD card 205 is loaded.
- the loading-unloading detection module 213 requests the encryption module 211 to erase the encryption key stored in the encryption module 211 when the SD card 205 is unloaded.
- Fig. 11 is a flowchart illustrating an exemplary process performed by the encryption module 211 and the loading-unloading detection module 213.
- the loading-unloading detection module 213 determines whether the SD card 205 is loaded in the card slot 134. If the loading-unloading detection module 213 determines that the SD card 205 is loaded in the card slot 134 (affirmative in S60), in S62, the loading-unloading detection module 213 issues a command to create an encryption key to the encryption module 211.
- the encryption module 211 creates an encryption key in response to the command to create an encryption key and stores the created encryption key.
- S64 formatting of the SD card 205 is performed.
- the user confirms the data resulting from decryption of the data stored in the SD card 205 by the encryption module 211 on the information processing apparatus 40 (on the OS).
- the decryption of the data originally stored in the encryption module 211 produces a meaningless data sequence. Accordingly, it is necessary to perform the formatting of the SD card 205 in S64 in order to allow the data in the SD card 205 to be correctly read out.
- Fig. 12 illustrates the structure of File Allocation Table 16 (FAT16), which is typical as a file system. In this structure, writing of data into the file system is performed in units of sectors.
- the OS uses a command illustrated in Fig. 13 for the file system to read out or write the data described in the file system.
- the encryption module 211 writes the data that is encrypted in a readout-writing data area illustrated in Fig. 13 when a "write" command is specified in Fig. 13 .
- the encryption module 211 decrypts the data in the readout-writing data area and reads out the decrypted data when a "read" command is specified in Fig. 13 .
- the loading-unloading detection module 213 issues a command to erase the encryption key to the encryption module 211.
- the encryption module 211 performs a process of erasing (deleting) the encryption key stored in the encryption module 211 on the basis of the erase command.
- access disabling processes similar to the ones in the first embodiment may be appropriately performed (for example, if a threshold value of the access disabling policy is exceeded). This allows the access disabling processes to be performed also at appropriate timing other than the unloading of the SD card 205.
- the data to be written on the SD card 205 is the data encrypted by using the encryption key and the encryption key is erased at the time when the SD card 205 is unloaded from the card slot 134 of the USB adapter 100, the data on the SD card 205 cannot be read out after the SD card 205 is unloaded. Accordingly, it is possible to improve the user-friendliness of the user by allowing the SD card 205 to be removed from the USB adapter 100 while suppressing leakage of the information, as in the first embodiment.
- the second embodiment is not limited to the above method.
- a new encryption key may be created upon unloading of the SD card 205 to overwrite the encryption key that is stored in the encryption module 211 with the new encryption key.
- Advantages similar to the ones in the second embodiment can also be achieved by this method.
- the loading-unloading detection module 213 may not be provided.
- whether access from the card slot 134 to the SD card 205 is normally performed may be detected by, for example, the encryption module 211 and it may be determined that the SD card 205 is unloaded from the card slot 134 if a state in which the access is normally performed is changed to a state in which the access is not normally performed (if an access error occurs).
- Advantages similar to the ones in the second embodiment can also be achieved by this method.
- the monitoring of the normal access may be performed by another component other than the encryption module 211.
- the formatting of the SD card 205 is automatically performed in S64 in the second embodiment, the second embodiment is not limited to this.
- the notification that the formatting should be performed may only be given to the user.
- FIG. 14 A third embodiment will now be described with reference to Fig. 14 .
- the same reference numerals are used in the third embodiment to identify the same components in the second embodiment. A description of such components is omitted herein.
- a volatile memory 215 is provided, in addition to the components in the second embodiment.
- the volatile memory 215 receives power from the battery and charging circuit 160.
- the encryption keys created in the encryption module 211 are stored in the volatile memory 215. In a state in which the power is not supplied from the battery and charging circuit 160 to the volatile memory 215, the content of the volatile memory 215 is invalidated and the stored encryption keys are erased.
- an opening-closing sensor 142 including a magnetic sensor, a current sensor, a proximity switch, or the like may be provided near a part where the main body 100b is connected to or engaged with a cap 102 or a strap 104.
- the opening-closing sensor 142 detects that the cap 102 or the strap 104 is removed from the USB adapter 100 and that the cap 102 or the strap 104 is connected to or engaged with the USB adapter 100.
- the switch 166 is directly turned on or off on the basis of the result of the detection by the opening-closing sensor 142.
- a permanent magnet detected by the magnetic sensor, a resistor element that is connectable to the current sensor, or a proximity member that is detectable by the proximity switch may be provided in the cap 102 or the strap 104.
- the microcomputer 120 (the CPU 122) may monitor and control the output detected by the opening-closing sensor 142. In this case, the switch 166 is turned on or off via the microcomputer 120 (the CPU 122). The elapsed time since the closing of the cap 102 or the strap 104, detected by the opening-closing sensor 142, may be used as a factor causing the access disablement in this case.
- the use of the elapsed time since the physical opening or closing detected by the opening-closing sensor 142 allows the elapsed time since the user has finally opened or closed the cap 102 or the strap 104 of the USB adapter 100 to be used as a factor causing the access disablement.
- the present invention is not limited to the use of the SD card.
- a memory stick related product such as a Memory Stick (registered trademark), a Memory Stick Duo (registered trademark), or a Memory Stick Micro (registered trademark), or any one of various memory cards including a mini SD card (registered trademark), a micro SD card (registered trademark), and an xD card (registered trademark) may be adopted as the portable storage medium.
- a card slot supporting one or multiple kinds of portable storage media may be used as the card slot 134.
- a USB memory or a USB-HDD may also be adopted as the portable storage medium.
- the card slot in each of the above embodiments is a USB connection interface.
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Hardware Design (AREA)
- General Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- Physics & Mathematics (AREA)
- Software Systems (AREA)
- Databases & Information Systems (AREA)
- Health & Medical Sciences (AREA)
- Bioethics (AREA)
- General Health & Medical Sciences (AREA)
- Storage Device Security (AREA)
- Debugging And Monitoring (AREA)
- Signal Processing For Digital Recording And Reproducing (AREA)
Abstract
Description
- This application is based upon and claims the benefit of priority of the prior Japanese Patent Application No.
2010-64173, filed on March 19, 2010 - The embodiments discussed herein are related to an adapter for a portable storage medium (hereinafter referred to as a portable storage medium adapter) and a method of disabling data access.
- Although portable storage media such as universal serial bus (hereinafter denoted as USB) memories excel in portability, etc., they have the risk of information leak caused by the portable storage media that are lost or stolen. In order to avoid the above risk, the portable storage media are provided with, for example, a function of adding a lock function to an area where the data in the USB memories is stored and not canceling the lock function if authentication using passwords fails, a function of deleting data files upon occurrences of input errors of passwords, or a function of encrypting the entire area where the data in the USB memories is stored without the lock function and preventing the decryption if authentication using passwords fails.
- In addition, for example, a technology disclosed in Japanese Lain-open Patent Publication No.
2006-338583 - A portable storage medium adapter connected to a computer to store data received from the computer in a portable storage medium includes, a holding part that detachably holds the portable storage medium, a detecting part that detects an unloading operation of the portable storage medium by a user, and a disablement executing part that executes a disabling process to disable external access to the data stored in the portable storage medium at a time when the unloading operation is detected in the detecting part.
- The object and advantages of the invention will be realized and attained by means of the elements and combinations particularly pointed out in the claims.
- It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory and are not restrictive of the invention, as claimed.
-
Fig. 1 is a perspective view illustrating an information processing apparatus and a USB adapter according to a first embodiment of the present invention; -
Fig. 2 is a block diagram schematically illustrating an exemplary configuration of the USB adapter according to the first embodiment; -
Fig. 3 is a block diagram schematically illustrating another exemplary configuration of the USB adapter according to the first embodiment; -
Fig. 4 is a block diagram for describing the functions of a microcomputer in the USB adapter according to the first embodiment; -
Fig. 5 is a flowchart illustrating an exemplary process in the USB adapter when a loading-unloading switch is pressed; -
Fig. 6 is a flowchart specifically illustrating a state evaluation step inFig. 5 ; -
Fig. 7 is a flowchart specifically illustrating readout of an access disabling process inFig. 6 ; -
Fig. 8A illustrates a format of an access disabling policy,Fig. 8B illustrates examples of the values of factors causing the access disablement, andFig. 8C illustrates examples of the values of access disabling methods; -
Fig. 9 illustrates exemplary access disabling policies; -
Fig. 10 is a block diagram for describing the functions of a microcomputer in a USB adapter according to a second embodiment of the present invention; -
Fig. 11 is a flowchart illustrating an exemplary process performed by an encryption module and a loading-unloading detection module according to the second embodiment; -
Fig. 12 illustrates the structure of FAT16, which is typical as a file system; -
Fig. 13 illustrates a command issued to a file system when an OS of an information processing apparatus reads out or writes data described in the file system; -
Fig. 14 is a block diagram for describing the functions of a microcomputer in a USB adapter according to a third embodiment of the present invention; and -
Fig. 15 is a block diagram for describing a modification of the first to third embodiments. - A portable storage medium adapter and a method of disabling data access according to a first embodiment will now be described with reference to
Figs. 1 to 9 . The same reference numerals are used to identify the same components in the respective drawings. -
Fig. 1 is a perspective view illustrating aninformation processing apparatus 40 serving as a host apparatus, such as a personal computer, and aUSB adapter 100 serving as a portable storage medium adapter for connecting a portable storage medium to an information processing apparatus. TheUSB adapter 100 is connected to aUSB port 49 of theinformation processing apparatus 40. Referring toFig. 1 , theinformation processing apparatus 40 is connected to aserver 320 via, for example, a local area network (LAN). However, theinformation processing apparatus 40 may not be connected to theserver 320. - The
information processing apparatus 40 includes aprocessor 42, a storage unit 44 (for example, a hard disk), aninput unit 46 such as a keyboard, adisplay unit 48 such as a liquid crystal display, and the USB port (connection terminal) 49. -
Fig. 2 is a block diagram schematically illustrating an exemplary configuration of theUSB adapter 100. Referring toFig. 2 , theUSB adapter 100 includes a USB interface (I/F) 110, aUSB hub 112, a read only memory (ROM) 118, a microcomputer (µC) 120, ahub switch 130, acard slot 134, and anindicator 144, such as a light emitting diode (LED). A Secure Digital (SD)card 205 functioning as a portable storage medium can be loaded and unloaded from thecard slot 134. Thecard slot 134 functions as a holding part holding the SD card and a release part releasing the holding of the SD card. TheUSB adapter 100 further includes a main power-supply circuit 150, a battery andcharging circuit 160, an auxiliary power-supply circuit 162, a real-time clock (RTC) 164 for display or monitoring of time, and aswitch 166. - A data file of a user, received from the
information processing apparatus 40, is stored in theSD card 205 held (loaded) in thecard slot 134. Upon pressing of a loading-unloading switch 201 functioning as a detection part by the user, thecard slot 134 discharges the loaded SD card 205 (releases the holding state). The loading-unloading switch 201 is provided in part of amain body 100b of theUSB adapter 100, as illustrated inFig. 1 . - The
USB interface 110 includes a power supply line or a pin PL (a broken line with arrows) and a data line or a pin DL (a solid line with two-way arrows). TheUSB hub 112 is connected to theUSB interface 110 and includes a branch power supply line PL (a broken line with arrows) and a branch data line DL (a solid line with two-way arrows). - The
indicator 144 is controlled by the microcomputer 120 (a central processing unit (CPU) 122) to display, for example, the operation state of theUSB adapter 100 and the remaining time before themicrocomputer 120 performs the first or subsequent access disabling or protecting process. - The
microcomputer 120 includes theCPU 122, a random access memory (RAM) 126, aninternal flash memory 124, and a power-supply control circuit 128. Theinternal flash memory 124 is capable of storing a firmware program (FW) used by theCPU 122 and data (identification information for authentication, an encryption key for the data file or the like, an access disabling policy, a log, and state information). - A USB memory utility program (PRG_U) for the user, used by the information processing apparatus 40 (the processor 42), is stored in the
ROM 118. A USB memory utility (for management, authentication, policy evaluation, etc.) program (PRG_F) used by theCPU 122 in themicrocomputer 120 is stored in theflash memory 124. - The
USB adapter 100 is connected to theUSB port 49 of theinformation processing apparatus 40 via the USB interface 110 (DL). TheROM 118 and themicrocomputer 120 are connected to theUSB interface 110 via the USB hub (DL) 112. Themicrocomputer 120 is connected to thecard slot 134 and theSD card 205 loaded in thecard slot 134 via the hub switch (DL) 130 and is connected to the battery andcharging circuit 160, the real-time clock 164, and theindicator 144. Thecard slot 134 and theSD card 205 are connected to theUSB interface 110 or themicrocomputer 120 via thehub switch 130 and the USB hub (DL) 112. - The battery and
charging circuit 160 receives power from theUSB port 49 of theinformation processing apparatus 40 via theUSB hub 112 and the USB interface 110 (PL) to charge a rechargeable battery, to supply the power to the auxiliary power-supply circuit 162, and to supply the power to the main power-supply circuit 150 via theswitch 166. The battery andcharging circuit 160 are connected to the auxiliary power-supply circuit 162. The main power-supply circuit 150 also receives power from theUSB port 49 of theinformation processing apparatus 40 via theUSB hub 112 and the USB interface 110 (PL). The main power-supply circuit 150 is subjected to on-off control with theswitch 166 to receive the power from the battery andcharging circuit 160 when theUSB adapter 100 is not connected to theinformation processing apparatus 40. Theswitch 166 is controlled by themicrocomputer 120 and the real-time clock 164. - The main power-
supply circuit 150 supplies power to theROM 118, themicrocomputer 120, thecard slot 134, and theindicator 144 when theUSB interface 110 is connected to theUSB port 49 of theinformation processing apparatus 40 or when the main power-supply circuit 150 is turned on with theswitch 166 to receive the power from the battery andcharging circuit 160. The auxiliary power-supply circuit 162 supplies power to the real-time clock 164 and theswitch 166. Theindicator 144 may receive the power from the auxiliary power-supply circuit 162, instead of the main power-supply circuit 150. - The
processor 42 of theinformation processing apparatus 40 can operate in accordance with a program (PRG_M) stored in thestorage unit 44 or the program (PRG_U) stored in the USB adapter 100 (the ROM 118). The utility program (PRG_M) for a manager and/or the utility program (PRG_U) for the user are stored in thestorage unit 44. - The utility program (PRG_U) for the user is read out from the
ROM 118 in theUSB adapter 100 to be stored in thestorage unit 44 upon connection of theUSB adapter 100 to theinformation processing apparatus 40. The utility program for the user includes, for example, management programs for authentication of the user, for authentication of the information processing apparatus, and for building a file system of the USB adapter 100 (the SD card 205). - The utility program (PRG_M) for the manager includes, for example, management programs for authentication of the manager, for authentication of the information processing apparatus, for setting (adding, updating, or deleting) the information processing apparatus to which access is permitted, for setting (adding, updating, or deleting) the access disabling policy, and for building the file system of the USB adapter 100 (the SD card 205). The access disabling policy may include identification information and/or parameters of rules or conditions and disabling methods. The
input unit 46 includes, for example, a keyboard and/or a pointing device. -
Fig. 3 is a block diagram schematically illustrating another exemplary configuration or arrangement of theUSB adapter 100 according to the first embodiment. Referring toFig. 3 , the function of ahub switch 132 provided in themicrocomputer 120 is used, instead of thehub switch 130 inFig. 2 . The remaining configuration or arrangement of theUSB adapter 100 illustrated inFig. 3 and the operation thereof are similar to the ones inFig. 2 . -
Fig. 4 is a block diagram illustrating an exemplary configuration or arrangement of the main functional parts in each of themicrocomputers 120 inFig. 2 andFig. 3 . - As illustrated in
Fig. 4 , themicrocomputer 120 includes a policy evaluator ordeterminer 20, anauthentication processor 22, acommand processor 24, an access disabling policy storage part (setting information storage part) 26, atime manager 28, and astate output part 30 as functional parts or circuit parts. Themicrocomputer 120 also includes a selector orcontroller 32 for selecting or controlling an access disabling method, an access disablement processor (executer) or adata protection processor 34, and a state information and log (record) storage part (state information holder) 36 as other functional parts or circuit parts. Theaccess disablement processor 34 functions as a disablement executer. These functions are realized (installed) by the firmware FW or the program (PRG_F) in theflash memory 124. Theauthentication processor 22 includes an authentication information storage part. The authentication information storage part in theauthentication processor 22, the access disablingpolicy storage part 26, and the state information and logstorage part 36 are areas in theflash memory 124 in themicrocomputer 120. The firmware FW, the program PRG_F, and the data in theflash memory 124 are not erased even if the power in the battery and chargingcircuit 160 runs out. - Erasing of encryption key in
protection process 1 in theaccess disablement processor 34 is a process of erasing multiple encryption keys stored in theflash memory 124. The multiple encryption keys are created upon storage of the data file that is encrypted in theSD card 205 to be stored in theflash memory 124. - The
policy evaluator 20 determines whether theSD card 205 loaded in theUSB adapter 100 is to be protected, that is, whether access to the data file in theSD card 205 is to be disabled in each protection level in accordance with each access disabling policy (the rule or condition and the disabling method of the access disabling policy) stored in the access disabling policy storage part (the part where the rules or conditions and the disabling methods are stored) 26 on the basis of the current date and time and the log and state information. If thepolicy evaluator 20 determines that theSD card 205 is to be protected, thepolicy evaluator 20 controls theselector 32 so as to select an access disabling method or a protection method in order to disable access to the data in theSD card 205. For example, erasing of an encryption key, erasing of data, or restriction of the function is performed to disable access to the data in theSD card 205. - The
authentication processor 22 sets the identification information for authentication to authenticate the information processing apparatus, the manager, and the user to which access is permitted on the basis of identification information for authentication set by the manager. As a result, connection of theUSB adapter 100 to the authorized information processing apparatus and use of theUSB adapter 100 by the authorized user or manager are detected. Theauthentication processor 22 records, for example, the current date and time, the date and time when an event such as authentication occurs, the date and time when theUSB adapter 100 is connected to theserver 320 via the information processing apparatus, the date and time when theUSB adapter 100 is opened and/or closed (when a cap of theUSB adapter 100 is opened and/or closed or when a strap of theUSB adapter 100 is mounted and/or unmounted), the count of continuous failures of authentication of the user, the count of continuous failures of authentication of the manager (privileged user), the count of continuous failures of authentication of theinformation processing apparatus 40, the remaining amount of power in the battery, and the state information in the state information and logstorage part 36 as the log or state information. - The
command processor 24 executes a command received from theinformation processing apparatus 40. Thecommand processor 24 stores the access disabling policy (the identification information and/or parameter indicating the rule or condition and the disabling method of the access disabling policy) set by the manager in the access disablingpolicy storage part 26 in accordance with the command. Thecommand processor 24 controls thehub switch command processor 24 causes thestate output part 30 to output the state information or log to theinformation processing apparatus 40 via theUSB interface 110 and theUSB hub 112 in accordance with the command. - The
time manager 28 manages, sets, and controls the real-time clock 164 in accordance with a request from thepolicy evaluator 20 or the result of evaluation by thepolicy evaluator 20. - The loading-unloading
switch 201 notifies thepolicy evaluator 20 of being pressed by the user. After an access disabling process is performed by theaccess disablement processor 34 in response to an instruction from thepolicy evaluator 20, the loading-unloadingswitch 201 is used to discharge theSD card 205 from the card slot 134 (release the holding state) so that the user can pick up theSD card 205 in response to an instruction from thepolicy evaluator 20. - Exemplary processes in the
USB adapter 100 when the loading-unloadingswitch 201 is pressed will now be described on the basis ofFigs. 5 to 7 and with appropriate reference to other drawings.Fig. 5 is a flowchart illustrating an exemplary process in theUSB adapter 100 when the loading-unloadingswitch 201 is pressed. - Referring to
Fig. 5 , in S10, it is determined whether the loading-unloadingswitch 201 is pressed by the user. If the loading-unloadingswitch 201 is pressed by the user, the pressing of the loading-unloadingswitch 201 is notified to thepolicy evaluator 20. In S12, a state evaluation subroutine is executed. - The
policy evaluator 20 executes the state evaluation routine in S12. Specifically, thepolicy evaluator 20 confirms the access disabling policy registered in the access disablingpolicy storage part 26 to execute a subroutine to confirm whether any access disabling process executed when theSD card 205 is unloaded exists. An exemplary process inFig. 6 is performed in the subroutine in S12. - Referring to
Fig. 6 , in S20, thepolicy evaluator 20 reads out one access disabling policy from the access disablingpolicy storage part 26. Each access disabling policy has a format illustrated inFig. 8A . However, the format inFig. 8A is only an example. The values of factors causing the access disablement are defined, for example, in a manner illustrated inFig. 8B and the values of access disabling methods are defined, for example, in a manner illustrated inFig. 8C . - The format in
Fig. 8A includes, for example, a factor causing the disablement of access to data (two bytes), an access disabling method (one byte), and a threshold value (four bytes). The threshold value concerns the factor causing the access disablement. The factors causing the access disablement inFig. 8B include, for example, the elapsed time since the final authorized access, the remaining amount of power in the battery, the count of failures of authentication of the information processing apparatus, the count of failures of authentication of the user, the count of failures of authentication of the manager (privileged user), the time since connection of theUSB adapter 100 to theinformation processing apparatus 40 is started before the authentication of theinformation processing apparatus 40 is completed (succeeds), the access disabling command specified by the user, and the unloading of theSD card 205. -
Fig. 9 illustrates examples of the access disabling policies based onFigs. 8A to 8C . Accordingly, the policy evaluator 20 sequentially reads out the access disabling policies inFig. 9 from the top to the bottom in S20. - Referring to
Fig. 6 , in S22, thepolicy evaluator 20 determines whether one access disabling policy is read out. If the determination in S22 is affirmative, in S24, it is determined whether the factor and the threshold value in the readout access disabling policy coincide with (are matched with) the ones when the loading-unloadingswitch 201 is pressed. If the factor and the threshold value in the readout access disabling policy do not coincide with the ones when the loading-unloadingswitch 201 is pressed, the determination in S26 is negative and the process goes back to S20. If the factor and the threshold value in the readout access disabling policy coincide with the ones when the loading-unloadingswitch 201 is pressed, the determination in S26 is affirmative and the process goes to S28. - Since the loading-unloading
switch 201 has been pressed in S10 inFig. 5 in the present embodiment, the determination in S26 is affirmative when the factor causing the access disablement in the access disabling policy is the "unloading of theSD card 205." The determination in S26 can be affirmative by the factor causing the access disablement in another rule before the rule in which the factor causing the access disablement is the "unloading of theSD card 205" is determined. - In S28, the
policy evaluator 20 executes a subroutine to read out the access disabling process. Specifically, thepolicy evaluator 20 executes an exemplary process inFig. 7 . - Referring to
Fig. 7 , in S30, thepolicy evaluator 20 determines whether the access disabling method in the readout access disabling policy is erasing of encryption key. If the determination is affirmative, in S32, thepolicy evaluator 20 sets an erasing-of-encryption-key flag. Thepolicy evaluator 20 has a two-byte variable as each flag. Accordingly, thepolicy evaluator 20 sets the bit corresponding to the erasing of encryption key in the two-byte variable in S32. - In S34, the
policy evaluator 20 determines whether the access disabling method is erasing by overwriting. If the determination is affirmative, in S36, thepolicy evaluator 20 sets an erasing-by-overwriting flag. In S38, thepolicy evaluator 20 determines whether the access disabling method is partial erasing. If the determination is affirmative, in S40, thepolicy evaluator 20 sets a partial erasing flag. In S42, thepolicy evaluator 20 determines whether the access disabling method is lock. If the determination is affirmative, in S44, thepolicy evaluator 20 sets a lock flag. In S46, thepolicy evaluator 20 determines whether the access disabling method is functional restriction. If the determination is affirmative, in S48, thepolicy evaluator 20 sets a functional restriction flag. - In S50, the
policy evaluator 20 sets a variable n indicating a spare number to one. In S52, thepolicy evaluator 20 determines whether the access disabling method is Spare n (Spare 1). If the determination is affirmative, in S54, thepolicy evaluator 20 seta a Spare n flag (Spare 1 flag). In S56, thepolicy evaluator 20 determines whether the variable n is equal to a maximum value N. If the determination is negative, in S58, thepolicy evaluator 20 increments the variable n by one and the process goes back to S52. The process repeats the steps S52 to S58 until the variable n is equal to the maximum value N. If the determination in S56 is affirmative, the processing in S28 inFig. 6 is terminated and the process goes back to S20. Then, the processing and determination inFig. 6 are repeated until the determination in S22 is negative, that is, until the readout of all the access disabling policies is terminated. If the determination in S22 is negative, the process goes to S14 inFig. 5 . - In S14 in
Fig. 5 , thepolicy evaluator 20 determines whether the protection is to be performed, that is, whether a flag is set in any bit in the two-byte variable in the process inFig. 7 . If the determination is negative, the process inFig. 5 is terminated. If the determination is affirmative, the process goes to S16. - In S16, the policy evaluator 20 sequentially selects the bits, for example, in descending order from the bits for which the flags are set in the two-byte variable via the
access disablement processor 34 and sequentially executes the disabling processes corresponding to the bits. The disabling processes make access to the files (data) in theSD card 205 difficult or disable access to the files (data) in theSD card 205. The disabling process having no meaning when it is executed possibly exists depending on the order. In such a case, the access disabling process is skipped. - After the disabling processes are executed in S16, in S18, the
policy evaluator 20 notifies the loading-unloadingswitch 201 of a permission to unload theSD card 205. An unloading operation (discharge operation) of theSD card 205 from thecard slot 134 is performed with the loading-unloadingswitch 201. Then, all the processes inFigs. 5 to 7 are terminated. Upon termination of the processes, the readout of the data stored in theSD card 205 is made difficult or is disabled. - As described above, according to the first embodiment, the
access disablement processor 34 executes the disabling process to disable external access to the data stored in theSD card 205 at a time when the loading-unloadingswitch 201 receives the unloading operation of theSD card 205 by the user. As a result, since the access to the data stored in theSD card 205 is disabled in the unloading of theSD card 205, it is possible to suppress leakage of the information in theSD card 205. In addition, since theSD card 205 can be replaced with another, if needed, it is possible to improve the user-friendliness of the user, compared with USB memories in related art. In other words, it is possible to enable use of the SD card which the user owns and to increase the life cycle of the product by replacing only the SD card when the SD card reaches its end of life due to restriction of the writing count while maintaining (or improving) the security function of the USB memory (the USB memory incorporating the flash memory or the like). - Since the
SD card 205 is not discharged from thecard slot 134 before theaccess disablement processor 34 terminates the execution of the access disabling process in the first embodiment, it is possible to more reliably suppress the leakage of the information. - Although the
access disablement processor 34 executes the access disabling process, such as the erasing of the data in theSD card 205, in the first embodiment, the present invention is not limited to this. For example, when theSD card 205 has a high-speed data erasing function, theaccess disablement processor 34 may only issue a command to cause theSD card 205 to erase the data. - A second embodiment will now be described in detail with reference to
Figs. 10 to 13 . The same reference numerals are used in the second embodiment to identify the same components in the first embodiment. A description of such components is omitted herein. In the second embodiment, as illustrated inFig. 10 , theUSB adapter 100 includes anencryption module 211 serving as an encryption key creator and a disablement executer and a loading-unloadingdetection module 213, instead of the loading-unloadingswitch 201 in the first embodiment (refer toFig. 4 ). It is assumed here that thecard slot 134 is capable of manual loading and unloading of theSD card 205. However, thecard slot 134 is not limited to the manual loading and unloading and thecard slot 134 may be capable of the automatic loading and unloading of the SD card 205 (the loading and unloading by using the loading-unloading switch), as in the first embodiment. - The
encryption module 211 encrypts data to be written on theSD card 205 connected to thecard slot 134 with an encryption key stored in theencryption module 211. In readout of the data, the data is decrypted with the encryption key stored in theencryption module 211. Theencryption module 211 also creates and erases ciphers. - The loading-unloading
detection module 213 detects a state in which theSD card 205 is loaded (mounted) in thecard slot 134 and a state in which theSD card 205 is unloaded (unmounted). The loading-unloadingdetection module 213 uses, for example, an optical sensor or a contact sensor to detect the loading or unloading of theSD card 205. The loading-unloadingdetection module 213 requests theencryption module 211 to create an encryption key when theSD card 205 is loaded. The loading-unloadingdetection module 213 requests theencryption module 211 to erase the encryption key stored in theencryption module 211 when theSD card 205 is unloaded. -
Fig. 11 is a flowchart illustrating an exemplary process performed by theencryption module 211 and the loading-unloadingdetection module 213. Referring toFig. 11 , in S60, the loading-unloadingdetection module 213 determines whether theSD card 205 is loaded in thecard slot 134. If the loading-unloadingdetection module 213 determines that theSD card 205 is loaded in the card slot 134 (affirmative in S60), in S62, the loading-unloadingdetection module 213 issues a command to create an encryption key to theencryption module 211. Theencryption module 211 creates an encryption key in response to the command to create an encryption key and stores the created encryption key. - In S64, formatting of the
SD card 205 is performed. At this time, the user confirms the data resulting from decryption of the data stored in theSD card 205 by theencryption module 211 on the information processing apparatus 40 (on the OS). However, since the data originally stored in theSD card 205 is not encrypted with the encryption key stored in theencryption module 211, the decryption of the data originally stored in theencryption module 211 produces a meaningless data sequence. Accordingly, it is necessary to perform the formatting of theSD card 205 in S64 in order to allow the data in theSD card 205 to be correctly read out. - In S66, recording of the data on the
SD card 205 by using the encryption key is started in response to a request from theinformation processing apparatus 40. The encryption method according to the present embodiment will now be described with reference toFigs. 12 and13 .Fig. 12 illustrates the structure of File Allocation Table 16 (FAT16), which is typical as a file system. In this structure, writing of data into the file system is performed in units of sectors. In theinformation processing apparatus 40, the OS uses a command illustrated inFig. 13 for the file system to read out or write the data described in the file system. In the present embodiment, theencryption module 211 writes the data that is encrypted in a readout-writing data area illustrated inFig. 13 when a "write" command is specified inFig. 13 . Theencryption module 211 decrypts the data in the readout-writing data area and reads out the decrypted data when a "read" command is specified inFig. 13 . - Referring back to
Fig. 11 , after the processing in S66 is performed, the recording by using the encryption key is continued until theSD card 205 is unloaded from thecard slot 134. In S68, it is determined whether theSD card 205 is unloaded. If the determination in S68 is affirmative, the process goes to S70. - In S70, the loading-unloading
detection module 213 issues a command to erase the encryption key to theencryption module 211. Theencryption module 211 performs a process of erasing (deleting) the encryption key stored in theencryption module 211 on the basis of the erase command. - In the second embodiment, in addition to the suppression of leakage of the information by creating and erasing the encryption key by the
encryption module 211 described above, access disabling processes similar to the ones in the first embodiment may be appropriately performed (for example, if a threshold value of the access disabling policy is exceeded). This allows the access disabling processes to be performed also at appropriate timing other than the unloading of theSD card 205. - As described above, according to the second embodiment, since the data to be written on the
SD card 205 is the data encrypted by using the encryption key and the encryption key is erased at the time when theSD card 205 is unloaded from thecard slot 134 of theUSB adapter 100, the data on theSD card 205 cannot be read out after theSD card 205 is unloaded. Accordingly, it is possible to improve the user-friendliness of the user by allowing theSD card 205 to be removed from theUSB adapter 100 while suppressing leakage of the information, as in the first embodiment. - Although the encryption key is created upon loading of the
SD card 205 and the encryption key is erased upon unloading of theSD card 205 in the second embodiment, the second embodiment is not limited to the above method. For example, a new encryption key may be created upon unloading of theSD card 205 to overwrite the encryption key that is stored in theencryption module 211 with the new encryption key. Advantages similar to the ones in the second embodiment can also be achieved by this method. - Although the loading-unloading
detection module 213 is provided in the second embodiment, the loading-unloadingdetection module 213 may not be provided. In this case, whether access from thecard slot 134 to theSD card 205 is normally performed may be detected by, for example, theencryption module 211 and it may be determined that theSD card 205 is unloaded from thecard slot 134 if a state in which the access is normally performed is changed to a state in which the access is not normally performed (if an access error occurs). Advantages similar to the ones in the second embodiment can also be achieved by this method. The monitoring of the normal access may be performed by another component other than theencryption module 211. - Although the formatting of the
SD card 205 is automatically performed in S64 in the second embodiment, the second embodiment is not limited to this. For example, the notification that the formatting should be performed may only be given to the user. - A third embodiment will now be described with reference to
Fig. 14 . The same reference numerals are used in the third embodiment to identify the same components in the second embodiment. A description of such components is omitted herein. In the third embodiment, as illustrated inFig. 14 , avolatile memory 215 is provided, in addition to the components in the second embodiment. - The
volatile memory 215 receives power from the battery and chargingcircuit 160. The encryption keys created in theencryption module 211 are stored in thevolatile memory 215. In a state in which the power is not supplied from the battery and chargingcircuit 160 to thevolatile memory 215, the content of thevolatile memory 215 is invalidated and the stored encryption keys are erased. - This allows advantages similar to the ones in the second embodiment to be achieved in the third embodiment. In addition, even when the battery in the battery and charging
circuit 160 is abnormally unmounted to disable the access disabling process by theaccess disablement processor 34, the data stored in theSD card 205 cannot be read out because the encryption keys are erased. Accordingly, it is possible to suppress leakage of the information. - In the above embodiments, as illustrated in
Fig. 15 , an opening-closing sensor 142 including a magnetic sensor, a current sensor, a proximity switch, or the like may be provided near a part where themain body 100b is connected to or engaged with acap 102 or astrap 104. The opening-closing sensor 142 detects that thecap 102 or thestrap 104 is removed from theUSB adapter 100 and that thecap 102 or thestrap 104 is connected to or engaged with theUSB adapter 100. Theswitch 166 is directly turned on or off on the basis of the result of the detection by the opening-closing sensor 142. A permanent magnet detected by the magnetic sensor, a resistor element that is connectable to the current sensor, or a proximity member that is detectable by the proximity switch may be provided in thecap 102 or thestrap 104. The microcomputer 120 (the CPU 122) may monitor and control the output detected by the opening-closing sensor 142. In this case, theswitch 166 is turned on or off via the microcomputer 120 (the CPU 122). The elapsed time since the closing of thecap 102 or thestrap 104, detected by the opening-closing sensor 142, may be used as a factor causing the access disablement in this case. The use of the elapsed time since the physical opening or closing detected by the opening-closing sensor 142 allows the elapsed time since the user has finally opened or closed thecap 102 or thestrap 104 of theUSB adapter 100 to be used as a factor causing the access disablement. - Although the SD card is adopted as the portable storage medium in the above embodiments, the present invention is not limited to the use of the SD card. For example, a memory stick related product, such as a Memory Stick (registered trademark), a Memory Stick Duo (registered trademark), or a Memory Stick Micro (registered trademark), or any one of various memory cards including a mini SD card (registered trademark), a micro SD card (registered trademark), and an xD card (registered trademark) may be adopted as the portable storage medium. A card slot supporting one or multiple kinds of portable storage media may be used as the
card slot 134. A USB memory or a USB-HDD may also be adopted as the portable storage medium. In this case, the card slot in each of the above embodiments is a USB connection interface. - It will be further understood by those skilled in the art that the foregoing description is of the embodiments of the present invention and that various changes and modifications may be made to the invention without departing from the spirit and scope thereof.
- All examples and conditional language recited herein are intended for pedagogical purposes to aid the reader in understanding the invention and the concepts contributed by the inventor to furthering the art, and are to be construed as being without limitation to such specifically recited examples and conditions, nor does the organization of such examples in the specification relate to a showing of the superiority and inferiority of the invention. Although the embodiments of the present invention have been described in detail, it should be understood that the various changes, substitutions, and alterations could be made hereto without departing from the spirit and scope of the invention.
Claims (10)
- A portable storage medium adapter connected to a computer to store data received from the computer in a portable storage medium comprising:a holding part that detachably holds the portable storage medium;a detecting part that detects an unloading operation of the portable storage medium by a user; anda disablement executing part that executes a disabling process to disable external access to the data stored in the portable storage medium when the unloading operation is detected in the detecting part.
- The portable storage medium adapter according to claim 1, further comprising:a releasing part that releases the holding of the portable storage medium by the holding part after the disabling process is executed.
- The portable storage medium adapter according to claim 1,
wherein the detecting part monitors an access state of the computer to the portable storage medium to detect that the unloading operation is performed when the access state is changed from a state in which the access is normally performed to a state in which the access is not normally performed. - The portable storage medium adapter according to claim 1, further comprising:an encryption key creating part that creates an encryption key used when the computer accesses the portable storage medium,wherein the disabling process performed by the disablement executing part is a process of erasing the encryption key created by the encryption key creating part.
- The portable storage medium adapter according to claim 4,
wherein the disabling process performed by the disablement executing part is a process of overwriting the encryption key with a new encryption key. - The portable storage medium adapter according to claim 4, further comprising:a volatile memory that stores the encryption key.
- A method of disabling data access performed by a portable storage medium adapter connected to a computer to store data received from the computer in a portable storage medium, the method comprising:detecting an unloading operation by a user for a holding part detachably holding the portable storage medium; andexecuting a disabling process to disable access to the data stored in the portable storage medium when the unloading operation is detected.
- The method of disabling data access according to claim 7, further comprising:creating an encryption key used in external access to the portable storage medium,wherein the disabling process is a process of erasing the created encryption key.
- The method of disabling data access according to claim 8,
wherein the disabling process is a process of overwriting the encryption key with a new encryption key. - The method of disabling data access according to claim 8, further comprising:initializing the portable storage medium after the encryption key is created.
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
JP2010064173A JP5505010B2 (en) | 2010-03-19 | 2010-03-19 | Storage medium adapter and data access disabling method |
Publications (3)
Publication Number | Publication Date |
---|---|
EP2367135A2 true EP2367135A2 (en) | 2011-09-21 |
EP2367135A3 EP2367135A3 (en) | 2011-11-09 |
EP2367135B1 EP2367135B1 (en) | 2016-07-13 |
Family
ID=44202007
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
EP11158730.9A Not-in-force EP2367135B1 (en) | 2010-03-19 | 2011-03-17 | Adapter for portable storage medium and method of disabling data access |
Country Status (3)
Country | Link |
---|---|
US (1) | US8495385B2 (en) |
EP (1) | EP2367135B1 (en) |
JP (1) | JP5505010B2 (en) |
Families Citing this family (13)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JP5393733B2 (en) * | 2011-06-30 | 2014-01-22 | 京セラドキュメントソリューションズ株式会社 | Electronics |
JP5786611B2 (en) * | 2011-09-30 | 2015-09-30 | 富士通株式会社 | Storage device and storage system |
US8601597B2 (en) * | 2011-12-29 | 2013-12-03 | Elwha Llc | System and method for protecting data stored on a removable data storage device |
JP5449430B2 (en) * | 2012-03-06 | 2014-03-19 | 東芝テック株式会社 | Magnetic card reader and electronic device |
JP5850463B2 (en) * | 2013-01-04 | 2016-02-03 | Necフィールディング株式会社 | Adapter device, information processing device, and information processing system |
KR101491382B1 (en) * | 2013-12-27 | 2015-02-06 | 현대자동차주식회사 | Integrated multimedia terminal system and control method of the same |
US9836637B2 (en) * | 2014-01-15 | 2017-12-05 | Google Llc | Finger print state integration with non-application processor functions for power savings in an electronic device |
US10430789B1 (en) | 2014-06-10 | 2019-10-01 | Lockheed Martin Corporation | System, method and computer program product for secure retail transactions (SRT) |
US9225695B1 (en) | 2014-06-10 | 2015-12-29 | Lockheed Martin Corporation | Storing and transmitting sensitive data |
RU2581559C2 (en) | 2014-08-01 | 2016-04-20 | Закрытое акционерное общество "Лаборатория Касперского" | System and method of using security policy to storage in network |
US10169563B2 (en) | 2017-01-27 | 2019-01-01 | International Business Machines Corporation | Encryption authorization dongle having volatile memory |
US10628334B2 (en) | 2017-03-06 | 2020-04-21 | Mcafee, Llc | System and method to protect digital content on external storage |
JP6411614B2 (en) * | 2017-11-02 | 2018-10-24 | 日本放送協会 | SD card encryption adapter |
Citations (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JP2006338583A (en) | 2005-06-06 | 2006-12-14 | Advance Design Corp | Storage medium for computer terminal |
JP2010064173A (en) | 2008-09-10 | 2010-03-25 | Covalent Materials Corp | Electrodeposition drill |
Family Cites Families (13)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US33320A (en) * | 1861-09-17 | Improvement in stump-extractors | ||
US178009A (en) * | 1876-05-30 | Improvement in burglar-alarms | ||
US7367503B2 (en) * | 2002-11-13 | 2008-05-06 | Sandisk Corporation | Universal non-volatile memory card used with various different standard cards containing a memory controller |
KR20060028781A (en) | 2003-06-30 | 2006-04-03 | 코닌클리즈케 필립스 일렉트로닉스 엔.브이. | Digital self-erasure of key copy-protected storage |
US20070033320A1 (en) * | 2005-08-05 | 2007-02-08 | Wu Victor C | Crypto pass-through dangle |
JP4755737B2 (en) * | 2006-08-31 | 2011-08-24 | 株式会社日立ソリューションズ | Portable storage medium encryption system, data carrying method using the system, and portable storage medium |
JP4301275B2 (en) * | 2006-09-28 | 2009-07-22 | ソニー株式会社 | Electronic device and information processing method |
JP2008204172A (en) * | 2007-02-20 | 2008-09-04 | Hagiwara Sys-Com:Kk | Card type memory |
JP2008262502A (en) * | 2007-04-13 | 2008-10-30 | Fujifilm Corp | Recording device, method for securing data recorded in recording device, and program |
JP2009003785A (en) * | 2007-06-22 | 2009-01-08 | Toshiba Corp | Removable media for data transfer |
EP2028603B1 (en) * | 2007-08-20 | 2011-07-13 | NTT DoCoMo, Inc. | External storage medium adapter |
JP5482059B2 (en) | 2009-03-13 | 2014-04-23 | 富士通株式会社 | Storage device and program for controlling access to storage device |
JP2011053889A (en) * | 2009-09-01 | 2011-03-17 | Nec Personal Products Co Ltd | Portable storage device, data transfer system and data transfer method |
-
2010
- 2010-03-19 JP JP2010064173A patent/JP5505010B2/en not_active Expired - Fee Related
-
2011
- 2011-03-17 EP EP11158730.9A patent/EP2367135B1/en not_active Not-in-force
- 2011-03-18 US US13/051,321 patent/US8495385B2/en not_active Expired - Fee Related
Patent Citations (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JP2006338583A (en) | 2005-06-06 | 2006-12-14 | Advance Design Corp | Storage medium for computer terminal |
JP2010064173A (en) | 2008-09-10 | 2010-03-25 | Covalent Materials Corp | Electrodeposition drill |
Also Published As
Publication number | Publication date |
---|---|
US8495385B2 (en) | 2013-07-23 |
JP5505010B2 (en) | 2014-05-28 |
EP2367135A3 (en) | 2011-11-09 |
EP2367135B1 (en) | 2016-07-13 |
JP2011198042A (en) | 2011-10-06 |
US20110231672A1 (en) | 2011-09-22 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US8495385B2 (en) | Adapter for portable storage medium and method of disabling data access | |
JP5482059B2 (en) | Storage device and program for controlling access to storage device | |
CN103207975B (en) | The method of protection password and computing machine | |
US20100058066A1 (en) | Method and system for protecting data | |
US8281388B1 (en) | Hardware secured portable storage | |
US20110088084A1 (en) | Information storage apparatus, recording medium, and method | |
JP2005011151A (en) | Memory card | |
EP1001331A2 (en) | Pre-boot security controller | |
US20120036369A1 (en) | Memory identification code generation method, management method, controller, and storage system | |
US9514040B2 (en) | Memory storage device and memory controller and access method thereof | |
US11586775B2 (en) | Securing data | |
KR101551817B1 (en) | Memory erase method and apparatus for the same | |
JP4653497B2 (en) | Portable storage device | |
JP2015079525A (en) | Adapter for portable storage medium and method for disabling data access | |
JP5160940B2 (en) | Hard disk drive | |
JP2007157153A (en) | Media drive for accepting media carrier, method for safely protecting storage medium and safely accessing data, computer readable medium and programmed computer | |
KR102422680B1 (en) | Flash Storage System Having Embedded Security Program | |
JP5662600B2 (en) | Portable storage medium adapter and data access disabling method | |
JP5767657B2 (en) | Method and computer for protecting data stored in non-volatile memory | |
RU119910U1 (en) | BUILT-IN TSM SECURITY MODULE | |
JP2011233087A (en) | Storage, control method and computer program | |
US20120047582A1 (en) | Data deleting method for computer storage device | |
US20130160077A1 (en) | Information processing apparatus, method for releasing restriction on use of storage device, and storage medium | |
US20240086336A1 (en) | Storage device deleting encryption key, method of operating the same, and method of operating electronic device including the same | |
KR102597220B1 (en) | Method and system for sanitizing data |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PUAI | Public reference made under article 153(3) epc to a published international application that has entered the european phase |
Free format text: ORIGINAL CODE: 0009012 |
|
AK | Designated contracting states |
Kind code of ref document: A2 Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR |
|
AX | Request for extension of the european patent |
Extension state: BA ME |
|
PUAL | Search report despatched |
Free format text: ORIGINAL CODE: 0009013 |
|
AK | Designated contracting states |
Kind code of ref document: A3 Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR |
|
AX | Request for extension of the european patent |
Extension state: BA ME |
|
RIC1 | Information provided on ipc code assigned before grant |
Ipc: G06F 21/00 20060101ALI20111004BHEP Ipc: G06F 21/20 20060101ALI20111004BHEP Ipc: G06F 21/24 20060101AFI20111004BHEP |
|
17P | Request for examination filed |
Effective date: 20120502 |
|
17Q | First examination report despatched |
Effective date: 20120704 |
|
REG | Reference to a national code |
Ref country code: DE Ref legal event code: R079 Ref document number: 602011028046 Country of ref document: DE Free format text: PREVIOUS MAIN CLASS: G06F0021240000 Ipc: G06F0021620000 |
|
GRAP | Despatch of communication of intention to grant a patent |
Free format text: ORIGINAL CODE: EPIDOSNIGR1 |
|
RIC1 | Information provided on ipc code assigned before grant |
Ipc: G06F 21/62 20130101AFI20160120BHEP Ipc: G06F 21/78 20130101ALI20160120BHEP |
|
INTG | Intention to grant announced |
Effective date: 20160205 |
|
GRAS | Grant fee paid |
Free format text: ORIGINAL CODE: EPIDOSNIGR3 |
|
GRAA | (expected) grant |
Free format text: ORIGINAL CODE: 0009210 |
|
AK | Designated contracting states |
Kind code of ref document: B1 Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR |
|
REG | Reference to a national code |
Ref country code: GB Ref legal event code: FG4D |
|
REG | Reference to a national code |
Ref country code: AT Ref legal event code: REF Ref document number: 812836 Country of ref document: AT Kind code of ref document: T Effective date: 20160715 Ref country code: CH Ref legal event code: EP |
|
REG | Reference to a national code |
Ref country code: IE Ref legal event code: FG4D |
|
REG | Reference to a national code |
Ref country code: DE Ref legal event code: R096 Ref document number: 602011028046 Country of ref document: DE |
|
REG | Reference to a national code |
Ref country code: LT Ref legal event code: MG4D |
|
REG | Reference to a national code |
Ref country code: NL Ref legal event code: MP Effective date: 20160713 |
|
REG | Reference to a national code |
Ref country code: AT Ref legal event code: MK05 Ref document number: 812836 Country of ref document: AT Kind code of ref document: T Effective date: 20160713 |
|
REG | Reference to a national code |
Ref country code: FR Ref legal event code: PLFP Year of fee payment: 7 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: NL Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20160713 Ref country code: NO Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20161013 Ref country code: IS Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20161113 Ref country code: IT Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20160713 Ref country code: HR Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20160713 Ref country code: RS Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20160713 Ref country code: LT Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20160713 Ref country code: FI Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20160713 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: AT Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20160713 Ref country code: LV Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20160713 Ref country code: PT Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20161114 Ref country code: GR Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20161014 Ref country code: PL Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20160713 Ref country code: SE Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20160713 Ref country code: BE Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20160713 Ref country code: ES Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20160713 |
|
REG | Reference to a national code |
Ref country code: DE Ref legal event code: R097 Ref document number: 602011028046 Country of ref document: DE |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: RO Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20160713 Ref country code: EE Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20160713 |
|
PGFP | Annual fee paid to national office [announced via postgrant information from national office to epo] |
Ref country code: DE Payment date: 20161228 Year of fee payment: 7 Ref country code: FR Payment date: 20170109 Year of fee payment: 7 |
|
PLBE | No opposition filed within time limit |
Free format text: ORIGINAL CODE: 0009261 |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: NO OPPOSITION FILED WITHIN TIME LIMIT |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: SM Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20160713 Ref country code: SK Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20160713 Ref country code: CZ Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20160713 Ref country code: BG Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20161013 Ref country code: DK Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20160713 |
|
PGFP | Annual fee paid to national office [announced via postgrant information from national office to epo] |
Ref country code: GB Payment date: 20170104 Year of fee payment: 7 |
|
26N | No opposition filed |
Effective date: 20170418 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: SI Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20160713 |
|
REG | Reference to a national code |
Ref country code: CH Ref legal event code: PL |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: MC Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20160713 |
|
REG | Reference to a national code |
Ref country code: IE Ref legal event code: MM4A |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: LU Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20170317 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: CH Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20170331 Ref country code: IE Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20170317 Ref country code: LI Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20170331 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: MT Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20170317 |
|
REG | Reference to a national code |
Ref country code: DE Ref legal event code: R119 Ref document number: 602011028046 Country of ref document: DE |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: AL Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20160713 |
|
GBPC | Gb: european patent ceased through non-payment of renewal fee |
Effective date: 20180317 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: DE Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20181002 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: GB Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20180317 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: FR Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20180331 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: HU Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT; INVALID AB INITIO Effective date: 20110317 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: CY Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20160713 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: MK Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20160713 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: TR Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20160713 |